Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Target Resume Now
Tailor your resume to this IT Vendor Risk Specialist role.
Rezi rewrites your resume against HCF Corporation's job description. Free.
Tailor your resume to this IT Vendor Risk Specialist role.
Rezi rewrites your resume against HCF Corporation's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the IT Vendor Risk Specialist posting at HCF Corporation — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the IT Vendor Risk Specialist posting at HCF Corporation — free, in seconds.
About the Role
Strengthen how HCF manages technology and information security risk across its third-party ecosystem by assessing vendor risk, evaluating security controls, and providing practical insights for informed risk decisions and regulatory compliance.
Responsibilities
- Perform IT Line 1 risk and assurance activities, including control assessments, evidence reviews, and third-party risk assessments for new, existing, and changed vendor engagements.
- Review vendor security and assurance documentation, including SOC 2 reports, ISO 27001 certifications, security questionnaires, policies, penetration test summaries, and control evidence.
- Assess third-party controls across areas including access management, data protection, incident management, business continuity, vulnerability management, and security governance.
- Identify and document control gaps, information security risks, recommendations, and residual risk considerations.
- Prepare clear, audit-ready assessment reports.
- Partner with business owners, Procurement, Cyber Security, and Technology teams to communicate vendor risks and support agreed risk treatment and remediation activities.
- Maintain accurate assessment records and support internal and external audit activities through appropriate evidence and documentation.
- Contribute to the continuous improvement of vendor risk management processes, assessment templates, reporting, and governance practices.
Requirements
- 3+ years of experience in information security, risk management, technology risk, IT audit, or compliance.
- Good understanding of IT processes, operational controls, and Line 1 control responsibilities.
- Experience reviewing vendor assurance artifacts such as SOC 2, ISO 27001, security questionnaires, policies, and control evidence.
- Strong understanding of information security domains including access management, data protection, incident management, vulnerability management, business continuity, and security governance.
- Working knowledge of relevant security and risk frameworks including ISO 27001/27002, NIST, SOC 2, COBIT, APRA CPS 234, and APRA CPS 230.
- Strong analytical and risk-based thinking, with the ability to identify control gaps and translate complex technical and risk concepts into clear, practical recommendations.
- Strong stakeholder engagement and communication skills, with the ability to collaborate across business, Procurement, Cyber Security, Technology, and Risk teams.
Skills
- Information Security
- Risk Management
- Technology Risk
- IT Audit
- Compliance
- SOC 2
- ISO 27001
- Security Questionnaires
- Policies
- Control Evidence
- Access Management
- Data Protection
- Incident Management
- Vulnerability Management
- Business Continuity
- Security Governance
- ISO 27001/27002
- NIST
- COBIT
- APRA CPS 234
- APRA CPS 230
- Analytical Skills
- Risk-Based Thinking
- Stakeholder Engagement
- Communication Skills
- CISSP
- CISA
- CISM
- CRISC
- ISO 27001 Lead Auditor
Experience Level
- 3+ years
Education Level
- Relevant tertiary qualifications or equivalent experience in Information Technology, Cyber Security or Risk Management.
- Certifications such as CISSP, CISA, CISM, CRISC or ISO 27001 Lead Auditor are highly regarded but not essential.
Benefits
- Flexible working arrangements
- 50% subsidy on HCF hospital and/or extras cover
- Family-friendly certified employer
- 18 weeks of parental leave for all new parents
- Mental health and wellbeing programs, including workshops, fitness classes, flu vaccinations, skin checks and more
- Discounts on HCF’s products, including life, pet and travel Insurance, as well as discounts at Fitness First gyms and on our eyecare products.
About the Company
- At HCF, our purpose is to bring our human touch to healthcare. Since 1932 we’ve been putting our members and their health first.
- As Australia’s largest not-for-profit health fund, we cover 2 million members with health, life, travel and pet insurance and our vision is to make healthcare understandable, affordable, high quality and member centric.
- We want to be true health partners to our members, easily guiding the healthcare choices that are right for them.
- At HCF, our values are the way we do things and create the necessary culture to help us realise our purpose and deliver our Strategy. Living our values in action we step forward, walk in their shoes, stay human, make it better and get there together.
Equal Opportunity
- We embrace diversity as our strength and are committed to maintaining an inclusive and collaborative work environment.
- Our workplace is welcoming and safe for all our employees, irrespective of their unique characteristics including age, ethnicity, cultural or spiritual background, gender identity, disability, education and socio-economic status.